I've solved the id group error message. It was happening because
the option "filter group
(&(objectClass=posixGroup)(cn=logonDRAGUNOV))" was letting NSLCD
just consult logonDRAGUNOV group, so it cloudn't determine the name
of the group id presente in error message.
To solve this issue, I just remove the cn=logonDRAGUNOV from
group filter parameter, then NSLCD could discover the group needed
information.

I believe that my configuration is write, because it's consulting
correctily, but when try to filter by group it's not working. On nslcd
debug I saw that group filter is doing it's job, but even when it
returns no result (user not on this group) the system permits the
access.

Group membership is probably best configured with pam_group.

filter group (&(objectClass=posixGroup)(cn=logonVISAO))

This means that only groups that match the above filter are found on the
system, it does not mean that only users that match this group can
login.
You should look into pam_authz_search with something like:
(&(objectClass=posixGroup)(cn=logonVISAO)(memberUid=$username))
Note that this is only applied to authorisation checks are using PAM. I
think this should also work in SSH when using key-based authentication.

This message may
contain privileged and confidential information for the use
of the intended recipients only. If you are not an intended
recipient then you should not disseminate, copy, or take any
action based on its contents. If you have received this
message in error then please notify E-TRUST by sending an
e-mail message to suporte [at] e-trust.com.br
immediately. Views and opinions expressed in this message do
not necessarily reflect the position of E-TRUST. If this
message is digitally signed, its authenticity can be
confirmed by E-TRUST Private Certificate Authority,
available at www.e-trust.com.br.

This message may
contain privileged and confidential information for the use of
the intended recipients only. If you are not an intended
recipient then you should not disseminate, copy, or take any
action based on its contents. If you have received this
message in error then please notify E-TRUST by sending an
e-mail message to suporte [at] e-trust.com.br immediately. Views
and opinions expressed in this message do not necessarily
reflect the position of E-TRUST. If this message is digitally
signed, its authenticity can be confirmed by E-TRUST Private
Certificate Authority, available
at www.e-trust.com.br.

This archive was generated using
mhonarc
on Mon Jun 01 04:04:32 2020.
If you have any questions about these pages, please contact
listmaster [at]
arthurdejong.org.
Please see the mailing list policy and disclaimer.